
$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier: QM85bMKAqoxRq8LdjM5Rhp0VbUrFQ2UOUZMfA94CcWU=
Subject key identifier: 43:93:69:FC:1F:CE:1B:99:79:5C:D3:F8:3D:84:CE:C5:88:DB:41:8F
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number: 27
Signing time: Thu 19 Feb 2026 07:03:11 +0000
Manifest this update: Thu 19 Feb 2026 07:03:10 +0000
Manifest next update: Thu 26 Feb 2026 07:03:10 +0000
Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: SKbdMn6RH+8mckBhimzPZcgHDfGN542YRWb2am4TQJA=)
2: 9D232386DA5A11F08EBD209195D3641D.roa (hash: Rmvf5m6wTJZAAz9CAshRRcE38nTYZ3UTi77IHZ61FEM=)
3: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: douuChwE4cVa4UY5ZnkV63EgeOMAXa3nKvyfzbnBXGs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 07:03:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
Validity
Not Before: Feb 19 07:03:10 2026 GMT
Not After : Feb 26 07:03:10 2026 GMT
Subject: CN=6996b5af-8eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:76:15:3e:0d:35:bd:67:6c:b4:1a:93:44:df:
6f:64:33:25:fa:fa:21:2b:75:cd:e9:d0:7a:d2:18:
44:00:f7:16:b4:de:08:93:86:dc:fd:8d:97:45:19:
5f:7a:01:fa:7f:a5:4a:94:65:d3:e8:2a:77:60:2b:
86:16:39:86:cd:90:f7:a6:2d:9e:12:cc:37:11:aa:
42:a3:98:ce:03:14:21:e0:a9:e4:51:1c:c0:f7:d3:
8e:ae:01:e0:54:15:b7:f8:48:b1:8e:15:83:f3:14:
ea:45:15:d2:74:cd:0a:c0:35:d5:8f:ec:1b:22:f3:
ff:05:76:70:a0:12:05:92:8b:e4:dc:e5:b7:08:6d:
11:b5:7e:78:8e:e2:93:31:ac:37:32:8b:26:45:6a:
78:2f:2a:e2:69:c6:40:3d:4a:89:02:a7:8f:f5:ff:
59:96:f6:e1:6e:9e:6f:4c:ca:0f:77:ef:74:20:18:
5e:86:af:40:94:8a:58:37:c6:2a:b2:7a:8a:6a:a6:
e7:e6:d2:c1:9e:db:53:82:e5:d7:89:f3:fe:ee:62:
fc:be:a7:a5:f5:01:d8:99:2d:8c:9a:0f:27:8c:99:
ba:24:1e:58:ae:f6:93:4b:f6:6c:ec:93:16:a2:0a:
1a:ee:d5:df:10:2d:92:bc:2f:43:90:ff:a9:3f:29:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:93:69:FC:1F:CE:1B:99:79:5C:D3:F8:3D:84:CE:C5:88:DB:41:8F
X509v3 Authority Key Identifier:
keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1d:98:37:a1:ad:53:a3:d6:7a:41:d0:71:87:f6:d0:16:01:c3:
0f:15:2d:0d:2e:d1:93:73:c0:e6:2c:01:d6:42:82:92:98:a9:
a3:6d:52:8e:0d:a1:c7:4c:bb:fc:fa:bd:74:2a:23:b6:a6:16:
0b:6d:b8:b8:f0:34:68:dc:2a:74:f7:54:3d:6e:42:53:da:b2:
30:e7:16:12:98:6d:cf:f3:65:2b:6b:13:e6:09:4a:f5:b9:dd:
aa:68:94:36:48:21:91:ea:2f:14:d4:9f:cf:e4:95:46:49:f9:
e2:1f:52:0a:a7:2c:47:ec:11:29:74:34:83:03:30:91:a1:7c:
41:b0:da:ee:39:99:9e:05:f4:10:98:c1:c6:b9:38:62:9f:51:
7b:8e:0a:cd:71:73:05:df:27:9f:bb:6d:c3:57:3e:9a:89:57:
63:ee:09:a0:6e:63:80:db:54:7d:24:81:16:da:9f:86:85:3f:
d7:b5:a5:ac:6a:63:1b:f3:64:f2:37:bd:09:33:23:e9:8f:cc:
41:79:ea:c0:9d:a8:56:c5:0e:b6:98:64:05:4a:ac:ed:a1:21:
b3:ed:de:67:19:5c:0b:36:f7:9b:97:9c:93:62:b6:63:b3:dd:
59:a1:80:44:93:e0:79:40:99:95:89:5c:ac:46:1e:df:cf:30:
5a:42:0f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 03:51:06 2026 by rpki-client